Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_2e9023fc78971e97c21e9526b0d6ebe8_bkransomware.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-20_2e9023fc78971e97c21e9526b0d6ebe8_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-20_2e9023fc78971e97c21e9526b0d6ebe8_bkransomware
-
Size
152KB
-
MD5
2e9023fc78971e97c21e9526b0d6ebe8
-
SHA1
44dd7def06b70e0f5892d240ff39ac733dfc24f6
-
SHA256
900ac64c95c37a96b1c37f339bf69fa82d442a29adc2c37b8eb71528068cbc58
-
SHA512
a1758bfd9dc44a25ff868a52349357ccf46e6c81a7ce56fbcffe8050bbf9c4697dba83a03a597fdd01fc2698cb78f2d4c90fe28bbc468ecc873fb1a88080a6c2
-
SSDEEP
3072:bwfnHBwiU2F7wxuZ3FnB4MDdfj2lnMkYWILHr6ANpVA4LrSZTfJduyn:8HB9DF1AhAN/gZTxJn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-20_2e9023fc78971e97c21e9526b0d6ebe8_bkransomware
Files
-
2024-06-20_2e9023fc78971e97c21e9526b0d6ebe8_bkransomware.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 325KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ